oval:org.mitre.oval:def:13764

Definition Id: oval:org.mitre.oval:def:13764

Oval ID:	oval:org.mitre.oval:def:13764
Title:	DSA-1816-1 apache2 -- insufficient security check
Description:	It was discovered that the Apache web server did not properly handle the "Options=" parameter to the AllowOverride directive: In the stable distribution , local users could enable script execution in Server Side Includes even in configurations where the AllowOverride directive contained only Options=IncludesNoEXEC. In the oldstable distribution , local users could enable script execution in Server Side Includes and CGI script execution in configurations where the AllowOverride directive contained any "Options=" value. For the stable distribution, this problem has been fixed in version 2.2.9-10+lenny3. The oldstable distribution, this problem has been fixed in version 2.2.3-4+etch8. For the testing distribution and the unstable distribution, this problem will be fixed in version 2.2.11-6. This advisory also provides updated apache2-mpm-itk packages which have been recompiled against the new apache2 packages. We recommend that you upgrade your apache2 packages.
Family:	unix	Class:	patch
Reference(s):	DSA-1816-1 CVE-2009-1195	Version:	5
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 4.0	Product(s):	apache2
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section apache2-src DPKG is earlier than 2.2.9-10+lenny3 AND apache2-doc DPKG is earlier than 2.2.9-10+lenny3 AND apache2 DPKG is earlier than 2.2.9-10+lenny3 OR Architecture depended section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section apache2-utils DPKG is earlier than 2.2.9-10+lenny3 AND apache2-mpm-worker DPKG is earlier than 2.2.9-10+lenny3 AND apache2.2-common DPKG is earlier than 2.2.9-10+lenny3 AND apache2-suexec-custom DPKG is earlier than 2.2.9-10+lenny3 AND apache2-suexec DPKG is earlier than 2.2.9-10+lenny3 AND apache2-mpm-prefork DPKG is earlier than 2.2.9-10+lenny3 AND apache2-dbg DPKG is earlier than 2.2.9-10+lenny3 AND apache2-mpm-event DPKG is earlier than 2.2.9-10+lenny3 AND apache2-threaded-dev DPKG is earlier than 2.2.9-10+lenny3 AND apache2-prefork-dev DPKG is earlier than 2.2.9-10+lenny3 AND apache2-mpm-itk DPKG is earlier than 2.2.6-02-1+lenny1 OR Release section Debian GNU/Linux 4.0 is installed. AND Architecture section Architecture independent section Installed architecture is all AND Packages section apache2-mpm-perchild DPKG is earlier than 2.2.3-4+etch8 AND apache2-src DPKG is earlier than 2.2.3-4+etch8 AND apache2-doc DPKG is earlier than 2.2.3-4+etch8 AND apache2 DPKG is earlier than 2.2.3-4+etch8 AND apache2-utils DPKG is earlier than 2.2.3-4+etch8 AND apache2-mpm-worker DPKG is earlier than 2.2.3-4+etch8 AND apache2.2-common DPKG is earlier than 2.2.3-4+etch8 AND apache2-threaded-dev DPKG is earlier than 2.2.3-4+etch8 AND apache2-mpm-event DPKG is earlier than 2.2.3-4+etch8 AND apache2-mpm-prefork DPKG is earlier than 2.2.3-4+etch8 AND apache2-prefork-dev DPKG is earlier than 2.2.3-4+etch8 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is hppa AND Installed architecture is sparc AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is mipsel AND Installed architecture is arm AND apache2-mpm-itk DPKG is earlier than 2.2.3-01-2+etch2

Definition Id: oval:org.mitre.oval:def:6513

Oval ID:	oval:org.mitre.oval:def:6513
Title:	Debian GNU/Linux 5.0 is installed
Description:	Debian GNU/Linux 5.0 (lenny) is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:debian:debian_gnu/linux:5.0	Version:	7
Platform(s):	Debian GNU/Linux 5.0	Product(s):
Definition Synopsis:
Debian GNU/Linux 5.0 is installed
Referenced By:
oval:org.mitre.oval:def:13764

Definition Id: oval:org.mitre.oval:def:6461

Oval ID:	oval:org.mitre.oval:def:6461
Title:	Debian GNU/Linux 4.0 is installed.
Description:	Debian GNU/Linux 4.0 (etch) is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:debian:debian_gnu/linux:4.0	Version:	9
Platform(s):	Debian GNU/Linux 4.0	Product(s):
Definition Synopsis:
Debian GNU/Linux 4.0 is installed
Referenced By:
oval:org.mitre.oval:def:13764

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0373s

Facebook rss twitter linkedin mail